CVE Vulnerability Catalog

A use-after-free vulnerability in the Linux kernel driver for Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0 may allow a denial of service. An authenticated unprivileged adversary with a low-complexity local attack can trigger the issue.

An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request.

In LWP::UserAgent versions before 6.83 for Perl, Authorization and Proxy-Authorization headers leak on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie, and caller-supplied Authorization and Proxy-Authorization headers are sent unchanged to the redirect target, including across scheme, host, or port changes.

An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.

An incorrect permission assignment for a critical resource in Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper, potentially allowing reading of a file outside the sandbox. This vulnerability is fixed in consul-template 0.42.0.

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who accesses the direct URL of the image, including unauthenticated visitors.

An unspecified vulnerability was discovered in the JavaScript Engine component of Firefox and Thunderbird. The flaw is fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

A vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird is caused by incorrect boundary conditions. The flaw was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

In Parse Server prior to 8.6.76 and 9.9.0-alpha.2, a race condition in the MFA SMS one-time password (OTP) login path allows two concurrent /login requests with the same OTP to both succeed and receive valid session tokens, breaking the single-use property of the OTP. Exploitation requires the attacker to already possess the victim's password and intercept the active SMS OTP and race the legitimate login, so the practical attack surface is narrow.

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open – using open braces to bypass the limit. Excessive bracing can cause memory usage up to the configured memory limit.

Dell PowerScale InsightIQ versions 5.0.0 through 6.2.0 contain an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this to elevate privileges.

Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker can use this to degrade server performance and bypass configured CPU time limits for Sieve scripts. Install fixed version, or alternatively prevent direct access to Sieve scripts via ManageSieve or local access. No publicly available exploits are known.

An attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires the attacker to position itself between Dovecot and the client connection; if successful, the attacker can eavesdrop communications as a MITM proxy.

The WP EasyPay WordPress plugin (versions up to and including 4.3.0) contains an insertion of sensitive information into sent data vulnerability. This may allow unauthorized retrieval of embedded sensitive data.

The Asset CleanUp: Page Speed Booster plugin (wp-asset-clean-up) by Gabe Livan (through 1.4.0.3) contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels.

The Broadstreet Ads plugin for WordPress in versions up to and including 1.52.2 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

SQL injection vulnerability in KACO Meteor server affects multiple blueplanet models. It allows an authorized attacker to elevate privileges over a local network.

A vulnerability in RUGGEDCOM ROX devices allows an authenticated remote attacker to read arbitrary files from the OS filesystem with root privileges. The issue stems from improper input validation in the web server's JSON-RPC interface.

SIPROTEC 5 devices do not use sufficiently random values to create session identifiers. An unauthenticated remote attacker could brute force a session identifier and gain unauthorized read access to limited information from the web server.